Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1863EB26C9311F185B5D617CF1D38B0.roa
File: D1863EB26C9311F185B5D617CF1D38B0.roa (raw, json)
Hash identifier: Fq0t3YCwHo5HxAE8/7olW8WJckCtYBMi8FHvDUb36mk=
Subject key identifier: 4B:1A:5F:A8:C8:F5:FD:62:FC:DD:59:30:99:8A:88:7F:1C:05:92:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1863EB26C9311F185B5D617CF1D38B0.roa
Signing time: Sat 20 Jun 2026 10:35:56 +0000
ROA not before: Sat 20 Jun 2026 10:35:51 +0000
ROA not after: Mon 27 Jul 2026 10:35:51 +0000
asID: 63139
IP address blocks: 156.227.199.0/24 maxlen: 24
156.227.203.0/24 maxlen: 24
156.229.29.0/24 maxlen: 24
156.229.30.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
156.229.44.0/23 maxlen: 24
156.229.46.0/24 maxlen: 24
156.229.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114476 (0x1bf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 10:35:51 2026 GMT
Not After : Jul 27 10:35:51 2026 GMT
Subject: CN=6a366d0c-a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:08:b5:cd:73:c4:5b:ed:11:11:73:d5:aa:e4:
d7:e9:b9:31:d3:29:0e:08:ff:8b:5c:15:da:56:79:
a3:c8:4e:53:10:8d:a4:2d:99:08:45:3e:46:a1:49:
06:b9:87:12:fd:7e:8c:ff:98:55:c3:71:32:f5:b7:
92:55:b4:7d:43:34:41:ed:9a:3a:97:f9:a1:5f:6e:
77:c1:b8:a9:98:2e:98:a9:61:b6:1a:70:44:4f:4f:
b7:41:ad:fe:45:0b:9c:88:d7:e9:c2:a8:ec:11:b2:
6b:56:9c:e4:9c:0c:0f:4e:72:08:ac:e4:72:02:22:
5b:d9:72:3d:4a:d6:ca:ea:0e:f6:38:e1:45:ae:21:
37:9a:e8:92:fd:2b:89:30:7a:22:b7:1f:5f:3d:38:
af:e5:b5:72:20:36:33:ce:ae:3a:3b:d4:2c:05:89:
ba:26:6d:76:13:e9:8b:53:b4:4d:11:fa:26:b5:ee:
77:39:ae:2d:5c:13:52:9c:58:84:37:bc:2f:49:eb:
af:05:f3:60:e4:da:ec:e8:d2:70:c6:ca:d1:3b:cb:
1a:de:3f:dd:ad:73:54:23:6f:9e:a5:dd:fb:ba:6e:
81:24:b8:6a:79:b1:04:69:69:d8:f0:37:52:e7:9b:
5b:51:98:8e:02:95:42:85:13:2e:f9:ca:37:25:ee:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1A:5F:A8:C8:F5:FD:62:FC:DD:59:30:99:8A:88:7F:1C:05:92:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1863EB26C9311F185B5D617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.199.0/24
156.227.203.0/24
156.229.29.0-156.229.31.255
156.229.40.0-156.229.46.255
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
56:84:03:81:00:0f:39:21:61:41:0f:8b:6d:52:e4:0e:73:39:
da:50:ed:37:5f:3b:88:50:05:3b:4c:35:71:f7:af:bc:21:5a:
e3:ee:7e:50:2e:3d:a8:1e:58:82:e1:65:2e:a9:52:a2:1e:28:
73:aa:12:ef:e1:5a:22:e2:28:a3:d8:bc:3d:a0:96:ac:84:9e:
e8:3b:17:4f:f9:22:bb:b9:3b:b1:16:87:c0:95:ad:86:d1:71:
52:c6:e1:03:26:40:8e:82:65:90:1a:f4:67:9b:80:51:b2:81:
a0:6a:bc:e7:c8:17:8e:82:02:53:d5:cf:5f:f0:77:ae:cd:c8:
8d:45:82:0b:0c:30:72:18:ae:3d:c4:41:fe:7a:9a:ee:93:ae:
c0:8c:93:c2:79:7c:3b:91:33:7f:3f:51:99:fd:0e:eb:0a:28:
12:52:86:bc:11:58:4f:a2:6e:4a:75:06:10:ac:6c:06:54:ea:
bc:de:fd:d3:1b:66:ed:0a:2b:67:8c:20:a1:0b:e5:80:d2:38:
8b:93:6b:c2:76:0d:24:75:84:66:ae:8d:43:63:65:08:33:90:
20:49:2e:d4:0b:e6:84:75:be:d3:aa:39:3b:c6:0b:13:ea:89:
3b:55:3d:31:ae:70:2d:c9:17:4d:a6:e5:ad:ac:2d:5b:58:b3:
f7:9c:85:d8
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAb8sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjIwMTAzNTUxWhcNMjYwNzI3MTAzNTUxWjAYMRYw
FAYDVQQDEw02YTM2NmQwYy1hOWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2gi1zXPEW+0REXPVquTX6bkx0ykOCP+LXBXaVnmjyE5TEI2kLZkIRT5G
oUkGuYcS/X6M/5hVw3Ey9beSVbR9QzRB7Zo6l/mhX253wbipmC6YqWG2GnBET0+3
Qa3+RQuciNfpwqjsEbJrVpzknAwPTnIIrORyAiJb2XI9StbK6g72OOFFriE3muiS
/SuJMHoitx9fPTiv5bVyIDYzzq46O9QsBYm6Jm12E+mLU7RNEfomte53Oa4tXBNS
nFiEN7wvSeuvBfNg5Nrs6NJwxsrRO8sa3j/drXNUI2+epd37um6BJLhqebEEaWnY
8DdS55tbUZiOApVChRMu+co3Je7oaQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFEsa
X6jI9f1i/N1ZMJmKiH8cBZKfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTg2M0VCMjZDOTMxMUYxODVCNUQ2MTdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAnOPHAwQAnOPLMAwDBACc5R0D
BAWc5QAwDAMEA5zlKAMEAJzlLgMEAJzlMTANBgkqhkiG9w0BAQsFAAOCAQEAVoQD
gQAPOSFhQQ+LbVLkDnM52lDtN187iFAFO0w1cfevvCFa4+5+UC49qB5YguFlLqlS
oh4oc6oS7+FaIuIoo9i8PaCWrISe6DsXT/kiu7k7sRaHwJWthtFxUsbhAyZAjoJl
kBr0Z5uAUbKBoGq858gXjoICU9XPX/B3rs3IjUWCCwwwchiuPcRB/nqa7pOuwIyT
wnl8O5Ezfz9Rmf0O6wooElKGvBFYT6JuSnUGEKxsBlTqvN790xtm7QorZ4wgoQvl
gNI4i5NrwnYNJHWEZq6NQ2NlCDOQIEku1AvmhHW+06o5O8YLE+qJO1U9Ma5wLckX
TablrawtW1iz95yF2A==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:34 2026 by rpki-client